CVE-2025-22622

Age Verification for your checkout page. Verify your customer's identity <= 1.20.0 - Reflected Cross-Site Scripting

mediumImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
6.1
CVSS Score
6.1
CVSS Score
medium
Severity
Unpatched
Patched in
N/A
Time to patch

Description

The Age Verification for your checkout page. Verify your customer's identity plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the myapp/class-wc-integration-agechecker-in tegration.php file in version 1.20.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

CVSS Vector Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Low
Confidentiality
Low
Integrity
None
Availability

Technical Details

Affected versions>=1.20.0 <=1.20.0
PublishedJanuary 18, 2025
Last updatedFebruary 24, 2025
Affected pluginagecheckernet

Check if your site is affected.

Run a free security audit to detect vulnerable plugins, outdated versions, and misconfigurations.